Buffer Overflow Vulnerability in FreeImage Software
CVE-2020-24294

6.5MEDIUM

Key Information:

Vendor: Freeimage Project
Status: Freeimage
Vendor: CVE Published:; 22 August 2023

🔔 Create Freeimage Project Vulnerability Alert

What is CVE-2020-24294?

A buffer overflow vulnerability exists in the psdParser::UnpackRLE function within PSDParser.cpp of FreeImage 3.19.0 [r1859]. This flaw allows remote attackers to trigger a denial of service by opening specially crafted PSD files, potentially resulting in application crashes or unexpected behavior. It highlights the importance of proper input validation and memory management in software development.

References

https://sourceforge.net/p/freeimage/discussion/36111/thre...

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 22, 2023
Vulnerability Reserved
Aug 13, 2020

JSON